ورود

توجه ! این یک نسخه آرشیو شده میباشد و در این حالت شما عکسی را مشاهده نمیکنید برای مشاهده کامل متن و عکسها بر روی لینک مقابل کلیک کنید : keylogger هست؟


AmirHosein
February 6th, 2010, 17:04
سلام آقا لینک زیر keylogger هست:-ss
Redirecting (http://877-77.com/a/a3.htm)

---------- Post added at 06:04 PM ---------- Previous post was at 05:03 PM ----------

انگار کسی جرات باز کردن نداره :-ss
Sepahrad
February 6th, 2010, 17:05
من باز کردم ؟!
AmirHosein
February 6th, 2010, 17:08
من باز کردم ؟!
چی بود :109:
Sepahrad
February 6th, 2010, 17:14
چی بود :109:

یک سایت چینی ! از KeyLogger و ... خبری نیست ;)
afrateam
February 6th, 2010, 17:15
این محتویات لینکی هست که دادین



<HTML><HEAD>

<meta http-equiv="content-type" content="text/html;charset=utf-8">

<meta http-equiv="pragma" content="no-cache">

<TITLE>Redirecting</TITLE>

<META HTTP-EQUIV="refresh" content="0; url=http://www.lovekaokaoni.cn/?webownerId=23339">

</HEAD>

<BODY onLoad="location.replace('http://www.lovekaokaoni.cn/?webownerId=23339')">

Loading...

</BODY></HTML>



و کد های پایین هم مربوط به صفحه ای هست که بهش ریدایرکت میشیم




<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=gbk" />

<title>考考你-范冰冰找茬</title>

<style type="text/css">

<!--



*{ margin:0px; padding:0px;}

body {

background: url(images/bg.gif) repeat;

line-height:120%;

font-size: 14px;

color: #000000;

}

.red{ color:red;}

.bold{ font-weight: bold}

a { color: #000; text-decoration:none;}

a:hover { color: #000; text-decoration: underline;}

a:visited { color: #000; text-decoration:none;}

.main{ width:1002px; margin:0px auto ;background:url(images/rr.gif) top right no-repeat;}

.top{ width:1002px; height:101px; background:url(images/top.gif) no-repeat;}

.midd{ float:left; width:787px; background: url(images/mbg.gif) top left repeat-y; padding:10px 100px 0px 115px;position:relative; overflow: hidden}

.midd h2{ width:100%; height: 60px;background:url(images/zhaocha.gif) no-repeat left;}

.mid_1{ text-align:center;}

.mid_2{ width:555px; height:270px; margin:15px auto; clear: both }

.mid_2lt{ width:252px; height:270px; float:left;}

.mid_2rt{ width:252px; height:270px; float:right;}

.mid_2lta{ float:left; margin-right:1px; margin-bottom:4px; width:127px;cursor: pointer;}

.mid_2ltax{ float:right; margin-bottom:4px;cursor: pointer;}

.mid_2ltb{ float:left; margin-right:1px;width:127px; cursor: pointer;}

.mid_2ltbx{ float:right; cursor: pointer;}

img { border:0;}

.clear{ clear:both;}

.bot{ width:747px; float:left; background:url(images/bot.gif) top left no-repeat; padding:100px 120px 10px 135px;}

div.select{ width: 787px; height: 25px; line-height:25px; clear: both; margin: 10px auto; text-align: center;}

-->

</style>

<script src="/js/q_main.js" type="text/javascript"></script>

<script type="text/javascript">

function checkAnswer(str) {

var myObj,msg="回答";

if(! (str == 1)){

msg=msg+"错误，您可以从第一个选项开始试试 ";

alert(msg);

return false;

}else {

alert('恭喜您，回答正确！即将抽奖！ 看您将抽到赢取哪一种奖品的机会.') ;

var paras = ['gopage='+gopage, 'webownerId='+webownerId, 'childid='+childid, 'id='+id, 'special='+special, 'siteurl='+siteurl];

var args = paras.join('&');

var gourl = '/index2.html?' + args;

window.location.href=gourl;

}

return false;

}



function checkform(obj) {

var answer = document.getElementsByName("RadioGroup1");

var myObj,msg="回答";

if(! (answer[1].checked)){

msg=msg+"错误，您可以从第一个选项开始试试 ";

alert(msg);

return false;

}else {

alert('恭喜您，回答正确！即将抽奖！ 看您将抽到赢取哪一种奖品的机会.') ;

var paras = ['gopage='+gopage, 'webownerId='+webownerId, 'childid='+childid, 'id='+id, 'special='+special, 'siteurl='+siteurl];

var args = paras.join('&');

var gourl = '/index2.html?' + args;

window.location.href=gourl;

}

return false;

}



function goPage3(){

var paras = ['gopage='+gopage, 'webownerId='+webownerId, 'childid='+childid, 'id='+id, 'special='+special, 'siteurl='+siteurl];

var args = paras.join('&');

var gourl = '/index_3.html?' + args;

window.location.href=gourl;

}

</script></head>



<body>

<div class="main">

<div class="top"></div>

<div class="midd">

<form id="send" name="send" method="get" onsubmit="return checkform(this);">

<h2></h2>

<div class="mid_2">

<div class="mid_2lt">

<span class="mid_2lta"><img src="images/t17a.gif" onClick="checkAnswer('2');" /></span>

<span class="mid_2ltax"><img src="images/t17b.gif" onClick="checkAnswer('1');" /></span>

<div class="clear"></div>

<span class="mid_2ltb"><img src="images/t17c.gif" onClick="checkAnswer('2');" /></span>

<span class="mid_2ltbx"><img src="images/t17d.gif" onClick="checkAnswer('2');" /></span>

</div>

<div class="mid_2rt">

<span class="mid_2lta"><img src="images/t17a.gif" onClick="checkAnswer('2');" /></span>

<span class="mid_2ltax"><img src="images/t17b2.gif" onClick="checkAnswer('1');" /></span>

<div class="clear"></div>

<span class="mid_2ltb"><img src="images/t17c.gif" onClick="checkAnswer('2');" /></span>

<span class="mid_2ltbx"><img src="images/t17d.gif" onClick="checkAnswer('2');" /></span>

</div>

</div>

<div class="select">

<label>

<input type="radio" name="RadioGroup1" value="单选" id="RadioGroup1_0" />

① </label>&nbsp;&nbsp;&nbsp;

<label>

<input type="radio" name="RadioGroup1" value="单选" id="RadioGroup1_1" />

② </label>&nbsp;&nbsp;&nbsp;

<label>

<input type="radio" name="RadioGroup1" value="单选" id="RadioGroup1_2" />

③ </label>&nbsp;&nbsp;&nbsp;

<label>

<input type="radio" name="RadioGroup1" value="单选" id="RadioGroup1_2" />

④ </label>

</div>

<div class="mid_1"><input type="image" src="images/submit.gif" /></div>

</form>

</div>

<iframe id="awardfrm" src="award.html?fee=2" width="1002" height="1320" scrolling="no" frameborder="0"></iframe>

</div>

</body>

</html>



و اینم کدهای اون فایل جاوا اسکریپتی که لود میشه




document.write("<style>ul{list-style:none;margin:0;padding:0;}</style>");

var indexPage="http://www.aiqianming.cn/index.htm?";

function GetLocationParam(param){
var request = {
QueryString : function(val) {
var s = location.href;
s = s.replace("?","?&").split("&");
var re = "";
for(i=1;i<s.length;i++)
if(s[i].indexOf(val+"=")==0)
re = s[i].replace(val+"=","");
return re;
}
}
if(param=="serviceId"){
if(request.QueryString(param)=="")return "100008";
}
if(param=="webownerId"){
if(request.QueryString(param)=="")return "10001";
}
if(param=="childid"){
if(request.QueryString(param)=="")return "10000";
}
if(param=="id"){
if(request.QueryString(param)=="")return "888888";
}
if(param=="ordertype"){
if(request.QueryString(param)=="")return "0";
}
if(param=="gotype"){
if(request.QueryString(param)==""){
return "";
}
}
if(param=="gopage"){
if(request.QueryString(param)==""){
return "2";
}
}

if(param=="special"){
if(request.QueryString(param)==""){
return "0";
}
}
if(param=="cross"){
if(request.QueryString(param)==""){
return "0";
}
}
if(param=="siteurl"){
var url = request.QueryString(param);
if(url=="") {
if(document.referrer) {
url = document.referrer;
} else if(window.opener && window.opener.location){
try{url = window.opener.location.href}catch(e){url = "";}
}
if(url=="")
url = "http://"+location.host+location.pathname;
}

try{var re = /http[^\?]+/i; url = url.match(re)}catch(e){}
return url;
}

return request.QueryString(param);
}
var webownerId=GetLocationParam("webownerId");
var serviceId = 100008;
var childid = GetLocationParam("childid");
var id = GetLocationParam("id");
var ordertype = GetLocationParam("ordertype");
var gopage = GetLocationParam("gopage");
var special = GetLocationParam("special");
var mobileid = GetLocationParam("mobile");
var name = GetLocationParam("name");
//var fee = GetLocationParam("fee");

var cross = GetLocationParam("cross");
var siteurl = GetLocationParam("siteurl");

var globalparas = ['gopage='+gopage, 'webownerId='+webownerId, 'childid='+childid, 'id='+id, 'special='+special, 'cross='+cross, 'siteurl='+siteurl];

var ref = "";
if(document.referrer) {
ref = document.referrer;
} else if(window.opener && window.opener.location){
try{ref = window.opener.location.href}catch(e){ref = "opener";}
}

var nref = location.href;
//if(nref.indexOf("index_") != -1 || nref.indexOf("submit.jsp") != -1) {
//if (ref == "" && special!=1){
//location.href="/error.html";
//}
//}

function isPhone(phone){
var pr = /^1[3|5|8]([0-9]{1})([0-9]{8})$/;
return pr.test(phone)
}

function isCHName(astr){
var lst = /^[\u4E00-\u9FA5]{2,4}$/;
return lst.test(astr);
}

function ToIndexWindow(){
var paras = ['id='+id, 'webownerId='+webownerId, 'childid='+childid, 'siteurl='+siteurl];
var args = paras.join('&');
var urlStr= indexPage + args;
var t=window.open(urlStr);
t.focus();
}

var to = "12590642123";
var result = "";
function showResult()
{
if(webownerId!="" && webownerId.length>0)
{
if(webownerId=="14964")
to = "125906421230";
else if(webownerId=="23196")
to = "125906421231";
else if(webownerId=="220848")
to = "12590642123";
else if(webownerId=="12068")
to = "125906421233";
else if(webownerId=="23502")
to = "125906421235";
else if(webownerId=="620848")
to = "12590642123";
else if(webownerId=="15359")
to = "125906421237";
else if(webownerId=="23577")
to = "125906421239";
else if(webownerId=="18112")
to = "1259064212300";
else if(webownerId=="116051" || webownerId=="216051")
to = "125906421230";
else if (webownerId=="15359")
to = "125906421238";
}
result = to + webownerId;
var res = "&nbsp;&nbsp;";
res = res+result.substring(0,5)+"&nbsp;&nbsp;";
res = res+result.substring(5,10)+"&nbsp;&nbsp;";
res = res+result.substring(10);
return res;
}

function show()
{
var result = document.getElementById("result");
result.innerHTML = showResult();
}




کدی توش ندیدم که مشکوک باشه
بعید میدونم کی لاگر باشه
باقی دوستان هم نظر بدن ...
sam_pontiac
February 6th, 2010, 17:25
این بیشتر به کد affliate میخوره ! که همه جای اسکریپتش به webmaster ID و ... اینها بر میخوره ، کیلاگر فکر نکنم باشه!
Arashdn
February 6th, 2010, 18:14
من با اینرتنت سکوریتی کسپر رفتم توش
همونطور که میدونید کسپر سومین فایروال قوی جهانه
هیچ ایرادی نگرفت